Privacy Policy

Between Kin is operated by 9571-9035 Québec Inc., a company based in Montréal, Québec, Canada.

Our Privacy Officer, responsible for how your information is handled and for answering your privacy questions, is:

Isabelle Gaudreau, Founder & Privacy Officer

privacy@betweenkin.com

This policy applies to betweenkin.com and the Between Kin service.

We collect only what the service needs, and nothing arrives without you (or a family member you've invited) typing it in:

Account information. The organizer's name and email address, used to create and access the account.

Plan information. The parent's first and last name, optionally their date of birth, and how each invited family member is related to the plan (parent or adult child). The birthdate, if provided, is used to time age-related milestones on your family's roadmap.

Participant information. The name and email address of each family member the organizer invites.

Questionnaire responses. The answers each participant gives privately. This is the most sensitive information we hold — it can reflect views on living arrangements, finances, health wishes, and family roles. We treat it accordingly (see "Who can see your answers").

Reports and roadmap data. The reports generated by comparing answers, personal reflections a participant chooses to write, conversation milestones, and decision notes your family records over time.

Payment information — which we deliberately never see. Payments are processed by Stripe. Your card number goes directly to Stripe and never touches our servers. We store only what Stripe tells us: that a subscription is active, its plan, and its renewal date.

Waitlist and marketing signups. If you join our mailing list, we store your email address, when you signed up, and where (so we can prove you actually asked to hear from us).

Usage and technical data. We use Vercel Web Analytics, a cookieless, privacy-focused tool, to see page views and general geography (city level, from your IP — which is not stored). We also keep minimal technical logs to keep the service secure. We never store your raw IP address anywhere. Where we need to limit repeated requests (a standard security measure), we store only a cryptographic hash — a one-way scramble that can't be reversed into your address.

What we don't collect: no advertising cookies, no cross-site trackers, no social media pixels, no data purchased from anyone. The only cookie we set is the one that keeps the organizer logged in.

We use your information for exactly three kinds of things:

To run the product. Generating each participant's private report, the shared family report, and your family's roadmap; timing milestone activations; letting your family return to its plan over months and years.

To communicate. Sending the emails the service depends on — login links, invitations, "your report is ready," gentle reminders. These are part of how the product works and go to every participant. Separately, if you've opted in, occasional updates from Between Kin — which you can leave with one click, anytime.

To keep the service safe and improving. Understanding, in aggregate, how the product is used; catching errors; preventing abuse.

We do not use your questionnaire answers for advertising, we do not build profiles of you, and we do not train AI models on your family's data.

Your private answers are yours. While you're answering, and after, no other family member can see your individual responses — not even the organizer who invited you. Your private report is visible to you alone.

The shared report is deliberate. It's created for the whole family at a defined moment, and you'll know what it contains before the conversation happens. It shows where the family aligns and where assumptions differ — that's the product.

The organizer sees progress, not answers. The organizer can see who has completed the questionnaire and how the plan is progressing — never anyone's individual responses.

Our team. Our team accesses family data only when needed to operate the service or respond to your requests — never to browse, and never for marketing. Access is limited, authenticated, and treated as an exception, not a habit.

We do not sell your data. We don't rent it, trade it, or share it with advertisers or data brokers.

Like every modern service, Between Kin runs on a small set of carefully chosen providers. Each receives only what its job requires:

Supabase — our database, where your family's information lives (hosted on AWS infrastructure in the United States).

Vercel — hosts the website and application, and provides our cookieless analytics.

Stripe — processes payments. Receives your payment details directly; we never see your card number.

Resend — delivers our emails. Processes participant names and email addresses to send them.

Sentry — alerts us when something breaks. Configured to scrub personal information from error reports before they reach us.

Better Stack — checks that the site is up. Receives no personal data.

These providers process data on our behalf under their own security and privacy commitments. We don't allow them to use your information for their own purposes.

Your data is stored in the United States, on Supabase's AWS infrastructure (US East). It is encrypted in transit and at rest.

Because Between Kin is a Québec company, we want to be explicit about something Québec law rightly asks us to tell you: your personal information is stored and processed outside Québec and outside Canada. The providers above are primarily US-based. We choose providers with strong security practices, but cross-border storage is part of how the service works, and you should know that before you use it.

Wherever you live, we extend the same rights to every family:

Access. Ask for a copy of the personal information we hold about you.

Correction. Ask us to fix information that's inaccurate.

Deletion. Ask us to delete your account and personal information.

Withdraw consent. Leave the mailing list anytime (one click), or withdraw consent to the service by closing your account.

To exercise any of these, email privacy@betweenkin.com from the address associated with your account (so we can verify it's really you — we'll never hand your family's data to someone we can't verify). We'll respond within 30 days.

For Québec and Canadian residents: these rights reflect our obligations under PIPEDA and Québec's Law 25, and you also have the right to complain to the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada if you believe we've fallen short. We'd appreciate the chance to fix it first.

If something goes wrong on our side — a breach that creates a real risk of serious harm — we will notify affected users and the relevant authorities as the law requires, promptly and plainly.

While your plan is active: we keep your family's data so the plan can do its job — this product is designed to live with your family across years.

After a subscription ends: we keep the data for 90 days, so a lapsed renewal doesn't erase your family's plan. After that, the account is eligible for deletion.

When you ask us to delete: personal information is removed within 30 days of a verified request. Today, deletion happens when you request it; automatic deletion after the 90-day window is on our roadmap, and we'll update this policy when it ships.

What we may keep: anonymized structural data — patterns like "families with three participants complete questionnaires faster" — with all names, emails, birthdates, and free-text answers removed, used only to make the product better. We also keep records we're legally required to keep (like payment records for tax purposes) and consent records (proof of what you agreed to and when).

Between Kin is a product for adults having adult conversations. It is not intended for anyone under 18, and we don't knowingly collect information from minors. Participants confirm they're agreeing to our terms as adults when they join. If you believe a minor has created an account or been invited as a participant, contact privacy@betweenkin.com and we'll remove the account and its data.

If we change this policy we'll update the version and effective date at the top, and for material changes notify you about updates to the policy.

Privacy questions or requests: privacy@betweenkin.com

Privacy Officer: Isabelle Gaudreau

We're a small company, which means your email is read by a human who can actually do something about it.